CVE-2022-50722
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
24/12/2025
Last modified:
29/12/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
media: ipu3-imgu: Fix NULL pointer dereference in active selection access<br />
<br />
What the IMGU driver did was that it first acquired the pointers to active<br />
and try V4L2 subdev state, and only then figured out which one to use.<br />
<br />
The problem with that approach and a later patch (see Fixes: tag) is that<br />
as sd_state argument to v4l2_subdev_get_try_crop() et al is NULL, there is<br />
now an attempt to dereference that.<br />
<br />
Fix this.<br />
<br />
Also rewrap lines a little.